EPSS
Percentile
33.4%
The plugin does not have authorisation check when managing its folder structure (such as moving, deleting, creating etc folders), which could allow any authenticated users, such as subscriber to perform such actions